CVE-2019-12157

CRITICAL

JetBrains UpSource <2018.2.1293 - Info Disclosure

Title source: llm

In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.

Core 1

Core References

Vendor Advisory x_refsource_misc

CVSS v3 9.8

EPSS 0.0000

EPSS Percentile 0.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-20

Status published

Products (3)

jetbrains/teamcity < 2018.2.5

jetbrains/upsource 2018.2 build_1013 (4 CPE variants)

jetbrains/upsource < 2018.2

Published Oct 02, 2019

Tracked Since Feb 18, 2026